Privacy Policy sengtoto – Member Personal Data Protection

1Introduction

Sengtoto ("we", "our platform") is fully committed to protecting the privacy and security of the personal data of every member using our online betting platform at sengtoto.vu. This Privacy Policy is prepared in accordance with Malaysia's Personal Data Protection Act (PDPA) and internationally recognized data protection standards.

This policy applies to all information we collect through the website, mobile app, customer support systems, and any communication channels associated with sengtoto. We encourage you to read this policy thoroughly so you fully understand your rights as a member of our platform.

If you disagree with any part of this policy, you have the right to discontinue use of sengtoto's services. Continued use of our platform following any changes to this policy constitutes acceptance of the updated terms.

2Data Collected

Sengtoto collects various categories of personal data necessary to provide safe, efficient, and responsible services to all members. The following are the categories of data we collect:

3Data Collection Methods

We collect your personal data through several key channels:

• Account Registration: When you register as a sengtoto member, you voluntarily provide basic personal information such as your name, email, phone number, and date of birth.
• KYC Process: To meet anti-money laundering (AML) compliance requirements, we request identity verification documents such as a copy of your identification card, bank statement, or other relevant supporting documents.
• Platform Activity: Every interaction you make on the sengtoto platform — including betting, deposits, withdrawals, and page navigation — is automatically recorded by our system.
• Devices & Technology: Our system automatically records technical information including IP address, browser type, operating system, and cookie data when you visit our platform.
• Customer Support: When you contact our support team via live chat or email, the conversation is recorded for quality control purposes and future reference if needed.
• Trusted Third Parties: In certain situations, we may receive data from trusted payment service providers or identity verification partners to complete your member profile.

4Data Usage Purpose

Sengtoto uses collected personal data solely for legitimate purposes directly related to the provision of our online betting platform services. The primary purposes are as follows:

• Processing new account registrations and verifying member identity through the established KYC process.
• Processing deposits, withdrawals, and all other financial transactions securely and accurately.
• Providing effective customer support and resolving any issues or inquiries submitted by members.
• Detecting and preventing fraud, hacking, money laundering, and any other illegal activities on our platform.
• Ensuring compliance with applicable legal and regulatory requirements, including reporting obligations to relevant authorities.
• Improving platform performance, enhancing user experience, and developing new features based on analyzed usage patterns.
• Sending important administrative notifications related to your account, transactions, or changes to our terms and policies.
• With your consent, we send promotional information, bonus offers, and marketing campaigns related to sengtoto.

5Data Sharing with Third Parties

Sengtoto understands that your trust is our most valuable asset. Therefore, we enforce a strict and transparent data-sharing policy. In general, we do not share your personal data with third parties except in the following situations:

• Payment Service Providers: Required transaction information is shared with payment gateway providers such as DuitNow, FPX, Touch 'n Go eWallet, Boost, and GrabPay solely to process your transactions.
• Identity Verification Providers: Relevant identity data is shared with trusted third-party KYC providers for legally mandated identity verification purposes.
• Legal Compliance: We will disclose personal data when required by court order, regulatory directive, or applicable legal obligation.
• Technical Service Providers: Selected technical partners who assist us in platform operations such as server hosting, analytics, and cybersecurity are bound by strict confidentiality agreements.
• sengtoto Interests Protection: In the event of legal action or fraud investigation, relevant data may be shared with legal or law enforcement authorities.

All third parties receiving personal data from sengtoto are required to comply with strict data confidentiality agreements and may only use such data for the agreed purposes.

6Data Security

Sengtoto invests seriously in data security infrastructure to ensure your personal information is always protected against unauthorized access, loss, misuse, or unauthorized disclosure.

Key security measures we practice include:

• Data Encryption in Transit: All communications between your device and our servers are protected by TLS 1.3 protocol and 256-bit SSL encryption, equivalent to international banking standards.
• Data Encryption at Rest: Sensitive data stored in our database is encrypted using AES-256 algorithms, ensuring it remains unreadable even in the event of a physical server breach.
• Multi-Layer Access Control: Only specifically authorized staff may access member personal data, and every access is automatically audited and recorded.
• 24/7 Security Monitoring: The sengtoto cybersecurity team continuously monitors system activity to detect and respond to any threats or suspicious activity in real time.
• Regular Security Testing: Our platform undergoes regular penetration testing and security audits by independent security experts to identify and address any potential vulnerabilities.
• Two-Factor Authentication (2FA): We support two-factor authentication to protect your account from unauthorized access even if your password is compromised.

7Cookies & Tracking Technologies

Sengtoto uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

• Essential Cookies: These cookies are required for basic platform functions such as login sessions, language preferences, and account security. The platform cannot function properly without them.
• Performance Cookies: Analytical cookies that help us understand how members use our platform, including the most frequently visited pages and time spent in each section.
• Functional Cookies: Cookies that store your preferences such as display settings, preferred language, and other information that helps us personalize your experience.
• Security Cookies: Used to detect suspicious activity, prevent fraud, and ensure the integrity of your login sessions.

You can manage cookie settings through your web browser. However, disabling essential cookies may prevent you from accessing certain sengtoto platform features. Session cookies are deleted automatically when you close your browser, while persistent cookies remain stored until they expire or you delete them manually.

8Your Rights as a Member

Under the Malaysia Personal Data Protection Act and sengtoto's policies, you have the following rights regarding your personal data:

• Right of Access: You have the right to request a copy of all personal data we hold about you at any time.
• Right to Rectification: If your personal data is inaccurate or incomplete, you have the right to request an immediate correction.
• Right to Erasure: You may request the deletion of your personal data, subject to applicable legal retention obligations.
• Right to Opt Out of Marketing: You may opt out of receiving marketing communications from us at any time, with no penalty.
• Right to Data Portability: You have the right to receive your personal data in a structured, machine-readable format for the purpose of transferring it to another service provider.
• Right to Object: You may object to the processing of your personal data for specific purposes where permitted by law.

To exercise any of the above rights, please contact sengtoto's customer support team via 24/7 Live Chat or email at [email protected]. We will process your request within 7–14 business days.

9Data Retention & Deletion

Sengtoto retains your personal data for as long as necessary to fulfill the purpose of its collection and to meet relevant legal obligations. Our data retention policy is as follows:

• Active Account Data: Retained for the duration your account remains active on the sengtoto platform.
• Data After Account Closure: Transaction records and identity data are retained for a minimum of 7 years following account closure, in accordance with anti-money laundering legal requirements.
• Communication Records: Customer support logs and communication records are retained for 3 years for reference and quality control purposes.
• Technical Data: System logs and analytics data are retained for 12 months before being anonymized or deleted.

Once the retention period expires or a valid deletion request is received, your data will be securely erased using data deletion methods that meet information security standards.

10Links to Third-Party Sites

The sengtoto platform may contain links to third-party websites or services for informational convenience. Please note that this Privacy Policy applies solely to the sengtoto platform.

Sengtoto is not responsible for the privacy practices or content of third-party websites you may access through links on our platform. We encourage you to read the privacy policy of each website you visit separately. Your visits to third-party websites are at your own risk and subject to their respective terms and privacy policies.

11Child Protection

The sengtoto platform is exclusively for adult users aged 18 years and above only. We do not intentionally collect or process personal data of individuals under the age of 18.

If we discover that personal data of an individual under the age of 18 has been collected without valid parental or guardian consent, we will take immediate steps to delete such data and close the associated account. If you are aware that someone under the age of 18 has registered on our platform, please contact us immediately at [email protected].

12Privacy Policy Amendments

Sengtoto reserves the right to amend, modify, or update this Privacy Policy at any time to reflect changes in our practices, legal requirements, or service improvements. Any significant changes will be communicated to members via their registered email or in-platform notification at least 14 days before the changes take effect.

The "Updated" date displayed at the top of this page indicates the date of the latest Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your personal data.